Operation Poisson: UAC Bypass and Privilege Escalation for Persistent Tool Installation

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

Detects various privilege escalation and reconnaissance techniques commonly associated with the 'Operation Poisson' campaign, including UAC bypass attempts, local administrator group enumeration, and administrative privilege verification triggered by script interpreters.